Notices: This section not yet converted to new layout. Download stats are rolling back out.

This is not the latest version of Microsoft Security Advisory: Insecure library loading could allow remote code execution available.

Microsoft Security Advisory: Insecure library loading could allow remote code execution

1.0.2

Package test results are passing.

This package was approved by moderator AdmiringWorm on 6/30/2018.

Microsoft has released a Microsoft security advisory about this issue for IT professionals. The security advisory contains additional security-related information. To view the security advisory, visit the following Microsoft website:
http://www.microsoft.com/technet/security/advisory/2269637.mspx

Microsoft has released new API enhancements for Windows to help developers correctly and securely load external libraries. For more information, visit the following Microsoft webpages:
SetDefaultDllDirectories
AddDllDirectory
RemoveDllDirectory

On systems other than Windows 7, Windows Server 2008 R2, Windows Vista or Windows Server 2008, this package installs successfully, but does nothing.

This update is required for .NET Core on Windows 7 or Windows Server 2008 R2.

To install Microsoft Security Advisory: Insecure library loading could allow remote code execution, run the following command from the command line or from PowerShell:

C:\> choco install kb2533623 --version 1.0.2

To upgrade Microsoft Security Advisory: Insecure library loading could allow remote code execution, run the following command from the command line or from PowerShell:

C:\> choco upgrade kb2533623 --version 1.0.2

Files

Hide
  • Tools\ChocolateyInstall.ps1 Show
    $msuData = @{
        '6.0-client' = @{
            # Windows Vista
            Url = 'https://download.microsoft.com/download/D/D/5/DD55423C-2E66-41D3-9815-6B9436B79B6F/Windows6.0-KB2533623-x86.msu'
            Url64 = 'https://download.microsoft.com/download/9/F/3/9F3EE03C-F0F0-4210-909F-24C1EB9E8AA5/Windows6.0-KB2533623-x64.msu'
            Checksum = '72184973C07B52F124EE896035557C53A7C1EAE1DCE2A5CC52D7DD9285E8EC01'
            Checksum64 = 'E39850785094F183EC0BFE5687579E3ECAD1DA4FBFD9E56F690B4CC30B7C00AA'
        }
        '6.0-server' = @{
            # Windows Server 2008
            Url = 'https://download.microsoft.com/download/8/9/5/895F11C7-268D-40DD-8266-46A895A4EB09/Windows6.0-KB2533623-x86.msu'
            Url64 = 'https://download.microsoft.com/download/0/7/7/077825F2-13D0-4209-9C9A-D3F9A49BBCBD/Windows6.0-KB2533623-x64.msu'
            Checksum = '72184973C07B52F124EE896035557C53A7C1EAE1DCE2A5CC52D7DD9285E8EC01'
            Checksum64 = 'E39850785094F183EC0BFE5687579E3ECAD1DA4FBFD9E56F690B4CC30B7C00AA'
        }
        '6.1-client' = @{
            # Windows 7
            Url = 'https://download.microsoft.com/download/2/D/7/2D78D0DD-2802-41F5-88D6-DC1D559F206D/Windows6.1-KB2533623-x86.msu'
            Url64 = 'https://download.microsoft.com/download/F/1/0/F106E158-89A1-41E3-A9B5-32FEB2A99A0B/Windows6.1-KB2533623-x64.msu'
            Checksum = '43BE36D164FD1C0CFF8E45BFB318EFA904EC4B53B0C8D306ABD640F1C06CCC41'
            Checksum64 = '58B8B00113FA8B9657D8DA5B14BAE93F765F29651C81055E3D127D4A22E5C0D6'
        }
        '6.1-server' = @{
            # Windows Server 2008 R2
            Url64 = 'https://download.microsoft.com/download/0/B/D/0BD4C49B-92F8-4BD3-A835-8E8A8CDA2A30/Windows6.1-KB2533623-x64.msu'
            Checksum64 = '58B8B00113FA8B9657D8DA5B14BAE93F765F29651C81055E3D127D4A22E5C0D6'
        }
    }
    
    Install-WindowsUpdate -Id 'KB2533623' -MsuData $msuData -ChecksumType 'SHA256'
    

Virus Scan Results

In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).

Chocolatey Pro provides runtime protection from possible malware.

Dependencies

Package Maintainer(s)

Software Author(s)

  • Microsoft

Tags

Release Notes

1.0.2: updated dependency to ensure correct handling of cases when the update is already installed

Version History

Version Downloads Last updated Status
Microsoft Security Advisory: Insecure library loading could allow remote code execution 1.0.2 87093 Thursday, June 8, 2017 approved
Microsoft Security Advisory: Insecure library loading could allow remote code execution 1.0.1 4556 Sunday, February 5, 2017 approved
Microsoft Security Advisory: Insecure library loading could allow remote code execution 1.0.0 292 Wednesday, November 2, 2016 approved

Discussion for the Microsoft Security Advisory: Insecure library loading could allow remote code execution Package

Ground rules:

  • This discussion is only about Microsoft Security Advisory: Insecure library loading could allow remote code execution and the Microsoft Security Advisory: Insecure library loading could allow remote code execution package. If you have feedback for Chocolatey, please contact the google group.
  • This discussion will carry over multiple versions. If you have a comment about a particular version, please note that in your comments.
  • The maintainers of this Chocolatey Package will be notified about new comments that are posted to this Disqus thread, however, it is NOT a guarantee that you will get a response. If you do not hear back from the maintainers after posting a message below, please follow up by using the link on the left side of this page or follow this link to contact maintainers. If you still hear nothing back, please follow the package triage process.
  • Tell us what you love about the package or Microsoft Security Advisory: Insecure library loading could allow remote code execution, or tell us what needs improvement.
  • Share your experiences with the package, or extra configuration or gotchas that you've found.
  • If you use a url, the comment will be flagged for moderation until you've been whitelisted. Disqus moderated comments are approved on a weekly schedule if not sooner. It could take between 1-5 days for your comment to show up.

comments powered by Disqus
Chocolatey.org uses cookies to enhance the user experience of the site.
Ok